Freedom251 › Data Discovery and Classification Software
Google Cloud NGFW
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free usage tier | Monthly free usage limits · 6 active secret versions · 10,000 access operations · 3 rotation notifications | Free |
| Active secret versions | Billed per version per location · Charged for active secret versions | $0.06 a month |
| Access operations | Billed per 10,000 operations · Charged for access operations | $0.03 a month |
| Rotation notifications | Billed for each rotation notification · Charged for rotation notifications sent to Pub/Sub | $0.05 a month |
| Cloud NGFW Essentials | standard network attributes including IP ranges, ports, and protocols | Free |
| Cloud NGFW Standard | metered by data processed · Google Cloud Threat Intelligence · FQDN objects · geolocation filtering | $0.02 a month |
| Firewall Insights overgranting analysis | per million log entries · 1-10,000 million log entries | $0.20 a month |
| Firewall Insights configuration analysis | per rule · configuration analysis | $1 a month |
The first 8 of 10 plans, as cloud.google.com lists them, read 22 Sept 2026. The maker's own page has the final word. Every plan
Facts from Google Cloud NGFW's own pages
- Automation interfaces
- Google Cloud documents APIs and the gcloud CLI for Cloud NGFW and provides Terraform guidance for hierarchical firewall policy configuration. · docs.cloud.google.com, 28 Sept 2026
- Central management
- Yes · cloud.google.com, 22 Sept 2026
- Data protection
- Google Cloud states that it encrypts data in transit between its facilities and at rest, with access to encryption keys limited to authorized roles and services with audited access. · cloud.google.com, 28 Sept 2026
- Distributed inspection
- Cloud NGFW uses a fully distributed, stateful inspection firewall engine built into Google Cloud's software-defined networking fabric and enforced at each workload. · cloud.google.com, 28 Sept 2026
- Documentation and support
- Cloud NGFW documentation provides quickstarts, guides, references, troubleshooting help, quotas and limits, billing questions, training, and code samples. · docs.cloud.google.com, 28 Sept 2026
- Domain filtering
- FQDN-based objects filter traffic by domain even when the underlying IP addresses change. · cloud.google.com, 28 Sept 2026
- Dynamic policy objects
- Google Cloud Threat Intelligence lists, FQDN objects, and geolocation objects are curated by Google, constantly updated, and automatically applied in firewall rules that call them. · cloud.google.com, 28 Sept 2026
- Endpoint limits
- Firewall endpoints support a maximum of 250 Mbps per connection with TLS inspection and 1.25 Gbps without TLS inspection. · docs.cloud.google.com, 28 Sept 2026
- Free plan
- Yes · cloud.google.com, 22 Sept 2026
- Intended workloads
- Cloud NGFW is designed to protect Google Cloud workloads against external threats from the internet and internal threats within the network. · docs.cloud.google.com, 28 Sept 2026
- Micro-segmentation
- IAM-governed tags provide granular control over north-south and east-west traffic down to a single VM across VPCs and organizations. · cloud.google.com, 28 Sept 2026
- Outbound control
- advanced · cloud.google.com, 22 Sept 2026
- Supported platforms
- web,api · cloud.google.com, 22 Sept 2026
- Policy hierarchy
- Network firewall policies are global by default, apply to all regions, and can be defined at organization, folder, and project levels with hierarchical firewall policies. · cloud.google.com, 28 Sept 2026
- Rule direction
- both · cloud.google.com, 22 Sept 2026
- Security and compliance
- Google Cloud states that its compliance offerings include ISO/IEC 27001/27017/27018/27701, SOC 1/2/3, PCI DSS, FedRAMP, GDPR alignment, and HIPAA alignment. · cloud.google.com, 28 Sept 2026
- Threat intelligence integration
- Cloud NGFW can block traffic using curated malicious IP and domain lists aggregated from Google, third-party, and open-source feeds. · cloud.google.com, 28 Sept 2026
- Threat prevention
- Cloud NGFW Enterprise provides an intrusion detection and prevention service powered by Palo Alto Networks that protects against malware, spyware, and command-and-control attacks. · cloud.google.com, 28 Sept 2026
- TLS inspection
- Cloud NGFW supports TLS interception and decryption for inspecting selected encrypted inbound, outbound, and internal Google Cloud traffic. · docs.cloud.google.com, 28 Sept 2026
Where Google Cloud NGFW stands on Freedom251
- Data Discovery and Classification Software#1 of 31
- SOAR Software#1 of 24
- Managed Detection and Response Services#2 of 34
- Data Security Posture Management Software#3 of 37
- Threat Intelligence Platforms#3 of 32
- Cloud Detection and Response Software#4 of 31
- Cloud Infrastructure Entitlement Management Software#4 of 29
- Data Loss Prevention Software#5 of 36
- LLM Security Tools#5 of 33
- Encryption Key Management Software#4 of 23
- SIEM Software#6 of 34
- Key Management Software#5 of 26
- Network Firewall Software#9 of 45
- Alert Management Software#8 of 40
- AI Guardrail Software#5 of 25
- Cloud Security Posture Management Software#10 of 44
- Attack Surface Management Software#8 of 35
- Cloud Security Platforms#9 of 38
- Forward Proxy Software#8 of 30
- Breach and Attack Simulation Software#6 of 21
- Software Supply Chain Security Software#7 of 24
- Security Configuration Management Software#10 of 34
- Secrets Management Tools#15 of 46
- Cloud Governance Software#9 of 27
- Web Application Firewall Software#14 of 40
- Public Key Infrastructure Software#10 of 27